Bitter Frontier What coding agents just made possible, where the bottleneck moved, and what deserves attention.

Evidence record / gemini-cli

A dated record of one change, kept so the writing that cites it can be checked. Compiled from the sources listed below by the research run, not written for reading. The judgment lives in the signals and issues that cite it, below.

2026-09-21-gemini-cli-v0-59-0-and-v0-60-0-harden-mcp-oauth-web-fetch-credentials-and-extensions

v0.59.0 makes workspace trust fail closed on environment signals, drops repository mcpServers in an untrusted a2a-server, and adds an SSRF guard to MCP OAuth metadata discovery covering loopback, private and metadata addresses (PRs 29099, 29081). v0.60.0 requires a matching iss in MCP OAuth responses (RFC 9207, PR 29117), makes web_fetch refuse private, loopback and metadata destinations and pin the resolved IP (PR 29120), stops container sandboxes mounting the host ~/.gemini OAuth and MCP token stores (PR 29216), re-prompts consent when an extension changes its env and strips NODE_OPTIONS-class variables (PR 28863), bounds read-only shell auto-approval to the workspace and makes ln -s ask (PR 29170), and skips system settings files writable by non-root users (PR 29115).

Channel: tagged-release (v0.59.0 2026-09-08, v0.60.0 2026-09-15). Half: both.

Operator consequence: 0.60.0 breaks MCP OAuth servers that omit iss and breaks web_fetch against a local dev server; both are intended. Read the new extension consent prompt instead of accepting it. Container-sandbox users no longer expose host tokens to the box.

Receipt

Finding metadata

Confidence
high

Run: 2026-09-21-weekly-digest-2026-08-20_2026-09-21-frontier-v0

Finding ID: 2026-09-21-gemini-cli-v0-59-0-and-v0-60-0-harden-mcp-oauth-web-fetch-credentials-and-extensions

Accepted signals

Profile citations

Source links

Primary links, including exact changelog lines when available.

  1. Gemini CLI
    github release2026-09-21-gemini-cli-v0-59-0-and-v0-60-0-harden-mcp-oauth-web-fetch-credentials-and-extensionsgoogle-gemini/gemini-cli / v0.60.0merged pr2026-09-21-gemini-cli-v0-59-0-and-v0-60-0-harden-mcp-oauth-web-fetch-credentials-and-extensionsgithub.com/google-gemini/gemini-cli/pull/29216tagged commit file2026-09-21-gemini-cli-v0-59-0-and-v0-60-0-harden-mcp-oauth-web-fetch-credentials-and-extensionsgoogle-gemini/gemini-cli / packages/core/src/services/environmentSanitization.ts

Versioned source: run artifact